Self hosted - blog.php-systems.com

Fixing my PPPOE configuration on PfSense

I am moving from a virtual machine on VMWare to a physical host for my firewall. There are many reasons. This machine was the last hold out of my move. I also was upgrading from Pfsense version 2.5.2 to version 2.7.2 as well, which did complicate matters.

pfSense and Tor

I have recently moved from a pfSense vm to dedicated hardware. I may move back, but while I was evaluating the system, I installed TOR ( The Onion Router) package on to my firewall to allow me to route traffic.

Using Kestra to update my proxmox IPSet

I've been using Kestra for a while now to automate some of the more mundane tasks around my network. One of these tasks is keeping the firewall up to date. This blog sits behind cloudflare, and as such, only cloudflare needs to access it. All other sources should be be denied (except internally).

FreePBX and Zen Digital Voice

As part of a money saving effort along with improving my internet speeds, I needed to do something with the telephone number coming in to my house. Fortunately, I have been playing with Asterisk for quite a few years now.

Fixing booting issues with LVM

Earlier this yaer, I bought a Firebat N100 pc to add to my proxmox cluster. The device itself is great. Apart from when updating, it sometimes reboots. Recently, this reboot was while the kernel was being updated.

Proxmox, LXC and Terraform

Even before Broadcom appeared to be doing it's best to kill off VMWare, I've been looking to migrate from VMWare to Proxmox. I already have 2 Proxmox nodes, and just have one last node to migrate, along with 1 VM. I have been migrating for a while and the import tool seems to work very well.

Fixing affliate links in Ghost

At some point (hopefully soon ...) I would like my blog to at least be able to generate some income. Getting off the ground is a bit of a pain. Amazon have minium of 3 sales before you can properly become an affliate.

Deploying vault via docker and ansible

Adding to my in-promptu series on automating docker containers with ansible, this time I'm looking at Hashicorp's Vault. This is slightly different, in that it required a binary to be installed on the ansible controller (a raspberry pi). Once vault is deployed, we need to unseal the containter.

Monitoring DMARC with Docker

In this post, I deploy a docker container via docker compose and ansible to read my dmarc reports.

Using ansible to deploy a gitlab runner.

After deploying watchtower to one of my docker instances, I noticed that it was having issues with restarting the container. The actual fault turned out to be the networking with portainer, but in the meantime, I wrote an ansible playbook to redeploy / restart the container.